Andrey Kopeyko Wrote:
-------------------------------------------------------
>
> Это вы уже повторяли. Но diff так и не показали.

Вот дифф. ssl_certificate для боевого хоста используется купленный. Для теста соответственно самовыданный
2c2
< server 192.161.10.253:443;
---
> server 192.168.1.253:443;
7c7
< listen 123.13.123.4:80;
---
> listen *:80;
18,21c18,21
< # ssl_certificate /etc/nginx/exchange_ssl/ssl/server.crt;
< # ssl_certificate_key /etc/nginx/exchange_ssl/ssl/server.nopass.key;
< ssl_certificate /etc/pki/tls/certs/22_01_2020/example.com_full.crt;
< ssl_certificate_key /etc/pki/tls/private/22_01_2020/example.com.key;
---
> ssl_certificate /etc/nginx/config/ssl/exchange.crt;
> ssl_certificate_key /etc/nginx/config/ssl/exchange.nopass.key;
> # ssl_certificate /etc/pki/tls/certs/22_01_2020/example.com_full.crt;
> # ssl_certificate_key /etc/pki/tls/private/22_01_2020/example.com.key;
25c25
< # ssl_protocols TLSv1.1;
---
> # ssl_protocols TLSv1.1;
27c27
< ssl_client_certificate /etc/nginx/exchange_ssl/ssl/ca.crt;
---
> ssl_client_certificate /etc/nginx/config/ssl/ca.crt;
58,59c58,59
< error_log /var/log/nginx/exchange.example.com_owa_error.log debug;
< access_log /var/log/nginx/exchange.example.com_owa_access.log exchange;
---
> error_log /var/log/nginx/exchange.example.com_owa_error.log ;
> access_log /var/log/nginx/exchange.example.com_owa_access.log;
73a74
>
77,79c78,79
<
< error_log /var/log/nginx/exchange.example.com_main_error.log debug;
< access_log /var/log/nginx/exchange.example.com_main_access.log exchange;
---
> error_log /var/log/nginx/exchange.example.com_error.log ;
> access_log /var/log/nginx/exchange.example.com_access.log exchange;
81a82
>

> Если клиент один и тот же - остаётся только вооружаться tcpdump, и под
>
> микроскопом изучать различия в двух ssl-handshake.

Снял strace в момент обращения, но там мало понятного.